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1. ensure that the SIS safety requirements are achieved for all relevant 
modes of the process; this includes both function and safety integrity 
requirements; 


2. ensure proper installation and commissioning of the safety 
instrumented system; 


3. ensure the safety integrity of the safety instrumented functions after 
installation; 


4. maintain the safety integrity during operation (for example, proof 
testing, failure analysis); 


5. manage the process hazards during maintenance activities on the 
safety instrumented system. 
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= Supply documentation as per 61508 / 61511 requirements to 
ensure SIS is installed and commissioned correctly 


" Follow Installation and Commissioning Plan 
" Tested in accordance with Commissioning Procedure 
" Safety Manual requirements included in O&M Procedures 
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+ SIS performs in all operating modes as identified in the SRS; 


* Confirmation that adverse interaction of the BPCS and other connected systems 
do not affect the proper operation of the SIS; 


¢ SIS properly communicates (where required) with the BPCS or any other 
system or network; 


¢ Sensors, logic solver, and final elements perform in accordance with the SRS; 
¢ SIS documentation is consistent with the installed system; 


¢ Confirmation that the SIF performs as specified on invalid process variable 
values; 


¢ The proper shutdown sequence is activated; 
¢ The SIS provides the proper annunciation and proper operation display; 
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- The SIS reset functions perform as defined in the SRS; 

¢ Bypass functions operate correctly; 

¢ Start-up overrides operate correctly; 

« Manual shutdown systems operate correctly; 

¢ The proof-test intervals are documented in the maintenance procedures; 
¢ Diagnostic alarm functions perform as required; 


¢ Confirmation that the SIS performs as required on loss of utilities (for example, 
electrical power, air, hydraulics) and confirmation that, when the utilities are 
restored, the SIS returns to the desired state; 


* Confirmation that the EMC immunity, as specified in the SRS, has been 


achieved. 
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» Key to maintaining the SIL over plant life time 

= O&M procedures must include Safety Manual requirements 
« Estimated repair times included in SIL verification 

= Proof Test Intervals included in SIL verification 


" Critical to plant safety that these are completed to schedul 
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= Procedures in place for 
« SIF Maintenance 
= Repair activities 
= Change control / modifications 
= Functional Safety Assessment 
" Periodic Functional safety audits 
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» Documentation includes 
= The modification or retrofit request 
= The impact analysis 
= Re-verification and re-validation of data and results 


« All documents affected by the modification and retrofit 
activity 
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Keeps the PFD within the design targets 
OHSA requirements in USA 
IEC 61508 and 61511 compliance 


PFDavg increases with test interval ...so without testing the 
PFDavg rises above limits and SIL falls to ZERO. 
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= Use a documented procedure 

" Test entire SIF 

« Test intervals based on the Safety Requirements Specification 
= Review the test interval after operational experience 

« Full testing after any changes 

= Description of all tests performed 


" keep records to certify the tests and inspections have been performed. 


ProSalus Limited Slide 8 - 16 


Copyright ProSalus Limited 2011 8 


Functional Safety Engineering 


SAFETY CONSULTANTS 


" Problem is to test the ability of the valve to close off flow or release 
pressure as per function 


= The need for final process test may be reduced if duty levels are not 
severe. 


« The testing of solenoid and ability to move the valve covers a large 
portion of potential faults. 


« Partial closure testing (Tia = PTI/10) and physical inspections at higher 
frequencies , leaving full closure tests to once per year or greater. 


" Define the testing facilities needed during the design stage 
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16.3.2 Inspection 


As stated in IEC 61511-1, inspecting the SIS is different from proof testing. 
Whereas a proof test is ensuring the SIS will operate properly, a visual 
inspection is required to validate the mechanical integrity of the installation. 


Normally, the inspection is done at the same time as the proof test but it may be 
done at a more frequent interval if desired.. 
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Some useful guidelines in these standards on how maintenance 
response and reporting activities can assist in building an accurate 
record of SIS reliability. 


From Phase 14 of the safety life cycle model in IEC 61508-1 see next 3 
diagrams, based on fig 7, 8 and 9 


These procedures lead to analysis of performance problems and may 
lead to modifications. Management of change M.O C. procedures then 
apply...see following slides 
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Normal Operations | 


Operations Report 


Fault Reported 


| 


Operations Constraint | Permit to Work 


| 


Repair and Test 


To fault analysis procedure 


Remove Permit to Work a 
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Maintenance Scheduling | 


Permit to Work Los Routine functional test 


| 


Operations Constraint | 


Diagnosis, Repair and Test 


Remove Permit to Work 
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———— é 
Analysis 
Systematic eee aoe - 
Tailiires Compare with data used in risk analysis Pailute or Demand Rate 
e.g.equipment faults | higher than predicted 
Revise Risk Analysis 


RRF not achieved 


To 
M.O.C 


ProSalus Limited Slide 8 - 22 


Copyright ProSalus Limited 2011 11 


Functional Safety Engineering 


—_-- 
=> ProSalus 
ak SAFETY CONSULTANTS 
Modification request initiators 
(see figure 8) 
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Modification tog 
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